Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

learn more… | top users | synonyms (1)

1
vote
1answer
88 views

AD FS 3.0 Event ID 364 while creating MFA (and SSO)

I have an clean installation of AD FS 3.0 installed on windows server 2012. I am trying to create MFA on my internal network using this Codeplex. AD FS Management > Authentication Policies ...
0
votes
1answer
1k views

Linux webfilter with LDAP SSO authentication

I'm looking for a self-made linux proxy/webfilter server and stumbled upon several products. (squidguard, dansguardian, ..) I found Privoxy the most appealing. Now I went searching on the internet for ...
2
votes
1answer
1k views

$_SERVER['REMOTE_USER'] not found using LDAP SSO

Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
2
votes
1answer
2k views

ADFS SSO - LDAP Attributes as Claims - UPN as NameID - NameID Missing from SAML Response for users whose UPN is changed

ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS. Claim Rule Template: Send LDAP Attributes as Claims Claim Rule Name: Send the UPN as NameID LDAP ...
5
votes
1answer
2k views

Can I use Office365 or Azure AD as master record for Active Directory?

We have a small business and currently don't have a need for a domain within our office. We have a basic network and a single server running Windows Server 2008 R2 with some file shares and 3rd party ...
1
vote
1answer
14 views

Incorrect Single Sign On Url - Cant Update

I'm having an issue. I've set up a third party SSO with my office365 account. The third party SSO authenticates with my on-premesis Active Directory. The only difference between using an ADFS on ...
1
vote
1answer
9k views

Windows 2008 R2 RDS - Double Login

Issue: Double logins when connecting to RemoteApps or Remote Desktop Environment: Gateway = 1 server 2008 R2 - Roles = Gateway, Session Broker, Connection Mgr, Session Host Configuration server ...
3
votes
3answers
356 views

Single sign on with Apache and LDAP

I have a server running two web applications: Gerrit and Mantis BT. Now, these applications connect to an LDAP server to authenticate users and it works fine. But the user has to authenticate for each ...
1
vote
0answers
13 views

SiteMinder web agent freeze with apached 2.4 (32bit) on Windows 2012 64

I am using Apached with Siteminder for single-sign on authentication. My config is as follow: 64 bit Windows 2012 (64) R1. Apached 2.4, (32 bits) (We tried the 64 bits but it does not work with the ...
2
votes
1answer
36 views

Dynamics CRM with Windows Essentials AD + Azure AD

I'm trying to configure a new Dynamics CRM 2016 on premise installation with Claims based authentication for Sharepoint Online (Office 365) and Internet facing access. We currently have a Windows ...
2
votes
2answers
2k views

Windows Server 2003 -Ktpass - crypto: enum value 'rc4-hmac' is not known

I'm trying to create a keytab with Ktpass on a Windows Server 2003 with: Ktpass -princ host/prueba-mail.ejemplo.org@EJEMPLO.ORG -mapuser host -pass password -crypto rc4-hmac -out UNIXhost.keytab I ...
0
votes
1answer
35 views

Apached + Siteminder issue

I am experiencing some very slow longin issue in my server that provide a single sign-on via Siteminder. After looking at the log. I can see the following: [15/Dec/2015:16:47:09] [Info] [CA ...
0
votes
1answer
23 views

Imitate Azure AD user/tenant claims within ADFS

I have a .Net web application that allows users to hook up their account with an identity provider (Azure AD, Google, and/or ADFS) to allow single sign-on. On hooking up their account (or ...
0
votes
2answers
26 views

ADFS and Shibboleth: Controlling behavior of Windows authentication

We are doing SSO using ADFS and Shibboleth SP. In a perfect world, Windows authentication would always work, i.e., the user accesses https://shibboleth/Login?target=somewhere, is redirected to ...
0
votes
1answer
56 views

Single Sign On with multiple Identity Providers from PHP web app

I'm building a SAAS web app in PHP that needs to integrate SSO. We'll have multiple client organizations, each that have their own Identity Provider (Active Directory). While researching ...
0
votes
3answers
172 views

Splunk SAML SSO from an IdP with Apache mod_mellon fails

I am trying to configure SSO from an IdP to Apache with mod_mellon and mod proxy to splunk. Environment: Ubuntu 14.04; Apache 2.4.7; mod-auth-mellon 0.7.0. Apache configured with the ...
0
votes
0answers
18 views

How to use shibboleth IDP under proxy?

Say I have a java web application which is configured to work with Shibboleth identity provider. Now I'm adding some another server on dfferent host which proxies requests to java web application. ...
0
votes
1answer
33 views

Linux LDAP to Ldapadmin configuration issues

I'm learning how to setup and use OpenLDAP installed on an Ubuntu server. I executed sudo apt-get install slapd ldap-utils -y and set my ldap domain to test.mydomain.com. I can execute ldapadd ...
0
votes
0answers
17 views

Does Azure AD SAML integration allow domain authenticated users to sign-on to Web Services without re-entering credentials?

Good Morning, I'm trying to understand the Azure AD SAML 2.0 process a little better and I have a question: If a user's on-premise Active Directory is synchronized (DirSync) with an Azure AD tenant, ...
0
votes
2answers
90 views

Using Shibboleth with ADFS doesn't work

I'm trying to familiarize myself with Shibboleth 2.5.3 and Active Directory Federation Services (tried both 2.0 and 3.0). What I'd like to achieve is having an Apache server authenticate against ADFS ...
1
vote
2answers
52 views

How to configure Tomcat WebApp to accept credentials from Apache

I am attempting to get a web application, running in Tomcat 6, to authorize a user that was authenticated by Apache. I have configured Apache 2.4 to use Active Directory for user authentication ...
0
votes
0answers
139 views

Can Keycloak be used as external (SSO) authentication service for Alfresco and Share?

I have an Web application with Java EE security running in Wildfly 9 that uses Keycloak 1.4 (in a separate service) as the authentication and authorization service. I'd like to allow users logged in ...
0
votes
0answers
97 views

Can Keycloak provide SSO via Apache web service?

I'm trying to use Keycloak as an external authentication service for Alfresco (see: Can Keycloak be used as external (SSO) authentication service for Alfresco and Share?). I've gotten no responses to ...
1
vote
2answers
126 views

Connect Azure Active Directory to on premise customer AD

We have a web application running in Windows Azure where a variety of customers can log in. Lately more and more of them have been asking for some sort of single sign on solution, or at least a ...
15
votes
4answers
25k views

How does SSO with Active Directory work whereby users are transparently logged in to an intranet web app?

I'm told that it's possible to make a web application that does not require a login. The user logs in to Windows, which authenticates via an Active Directory (LDAP) Lookup. Then, they should be able ...
1
vote
0answers
124 views

SSO Linux and AD Trusted Domain

Having successfully built a one-way trust between 2 AD domains, we can't lookup/id the user in the trusted domain. Here's our use case. AD1: dom1.com (Win2k8 R2) - One-way outgoing trust to AD2 ...
0
votes
0answers
115 views

Is it ok to disable the KCM (Kerberos Credential Cache) daemon on OS X?

I've got some issues that seems would be cleared up if I disable the KCM Daemon (it's the Kerberos Credential Cache). Is there any good reason I shouldn't? Does it break anything other than single ...
2
votes
1answer
144 views

Azure AD SAML2 SSO wrong NameID format

I am trying to integrate a SaaS application with an autonomous (not federated with anything) Azure Active Directory for SSO purposes. The SaaS application (the Service Provider) is SAML2 compliant ...
1
vote
1answer
42 views

Single Sign on for Virtual Machine

Does anyone know if it is possible for a Windows Virtual Machine on a Windows host to take advantage of Single Sign on? The objective is to only have to login once to the host machine and for the ...
0
votes
0answers
59 views

SAML for Google Cloud Platform with no Google Apps for Business

Is there a way to use SAML SSO with google cloud platform without paying for the $10/month account fee for Google Apps for Business (Which most SAML auth with Google seems to point to)? Our ...
1
vote
1answer
116 views

Single Sign-On and Active Directory Federation (ADFS)

Can anyone please tell me, what is the difference between active directory federation services (ADFS) and single sign-on (SSO)? From a simple look at things both seem to do much the same thing in ...
0
votes
0answers
113 views

Kerberos key version number mismatch in Apache, even though kvno and klist -k return the same numbers

I don't know if anyone had this issue. I am trying to implement single-sign-on through Kerberos and I get the following Apache error: [Thu Aug 13 12:08:54.219420 2015] [auth_kerb:error] [pid 1829] ...
2
votes
1answer
252 views

Linux SSO for multiple windows domains

I have successfully implemented SSO on apache for windows users in the same AD domain that the apache server is in: AD domain = example.com Linux server = linux.example.com KDC = ad.example.com I ...
0
votes
0answers
131 views

JBoss EAP 6.3 - SSO and Sticky Sessions not working

We have a cluster with 2 nodes (JBoss EAP 6.3 with Single Sign On enabled), node 1 and node 2 in different servers. On top of that we have an Apache2 and are using mod_cluster for load balancing and ...
0
votes
1answer
247 views

How can I use mod_auth_cas to authenticate Moodle?

What I want For various reasons, I'd like to see the following authentication procedure work: go to moodle.blah.bla Apache asks for your login information via mod_auth_cas Once authenticated, ...
22
votes
6answers
52k views

Google Chrome: passthrough Windows authentication

The I.T. dept is considering allowing installation and automated deployment of Google Chrome browser to 100+ desktops. One of the requirements is for domain credentials to be passed through. The ...
0
votes
0answers
55 views

Error deploying VMware Integrated Openstack OVF on vCenter 6

I'm trying to deploy an OVF from VMware Integrated Openstack at my vCenter 6, but now it was showing an "Operation time out" message. Before, it was showing the message "the operation is not allowed ...
1
vote
1answer
612 views

Why is ADFS not passing credentials through with Integrated Windows Authentiation?

We have an ADFS 2.0 instance set up. We use it for 3rd party web app single sign-on. Everything works beautifully with the existing app, App1 with SAML 2.0, including IWA pass-through when users are ...
1
vote
0answers
186 views

SAML/OpenID authentication on Docker/Core OS

I have a set of servers running Core OS/Docker/Docker Swarm. I have my users in a SAML/OpenID SSO server. I want these users to be able to run Docker containers on my Core OS cluster. How do I ...
13
votes
5answers
8k views

How practical is it to authenticate a Linux server against AD?

We utilise both Windows and Linux server at our software development company. One of the friction points with this setup is that we don't have a single sign-on solution. Being more of a Microsoft ...
0
votes
0answers
32 views

Apache2.2 Mod:mod_auth_sspi with cross domain

I've setup Apache 2.2 with mod_auth_sspi 1.0.4 on Windows Server 2012 R2 and try to authenticate on our PHP website from the server in domainA to the domain controller in domainB. This is the sspi ...
0
votes
2answers
436 views

Apache 2.2 mod_auth_kerb SSO stopped working

I'm all out of ideas why has it just stopped working, here's what I checked: httpd-error.log: [Thu Jun 11 18:04:21 2015] [debug] src/mod_auth_kerb.c(1758): [client 10.105.5.131] ...
1
vote
1answer
68 views

Office 365 SSO presenting two signon boxes when using ADFS Proxies

I have the following setup- we use an external, third-party load balancer to forward traffic to one of our two ADFS Proxies (in the DMZ) which in turn forward to one of our two ADFS servers. ...
4
votes
0answers
276 views

Windows Authentication to a Remote Server within an Intranet Environment

I have several servers (all on the same DC) within an Intranet environment at my company. For simplicity, I'll focus my question on the IIS and SQL Servers. I have an IIS 7.5 web server and a remote ...
0
votes
1answer
257 views

Reverse Proxy single sign-on

I have a reverse proxy handling ssl termination and mod_security. The issue is after sso reaches the backend server it tries to authenticate with cas directly instead of the through the proxy still, ...
0
votes
1answer
178 views

Kerberos SSO virtualhost different domain

I have a running centos6.6 server who authenticates against a windows 2008 AD with realm EXAMPLE.LOCAL. I have successfully configured an apache webserver for authentication through kerberos keytab ...
0
votes
0answers
141 views

OpenAM 12.0 IDP SOAP based SLO not working on https

I am trying to configure OpenAM with my own certificate having alias other than "test" as per the document http://docs.forgerock.org/en/openam/12.0.0/admin-guide/index/chap-certs-keystores.html over ...
2
votes
1answer
174 views

Group Policy and Internet Explorer's Site to Zone assignment issues?

We are using GPO to apply Site to Zone assignements for our users so that we can add some specific addresses into their Internet Explorer's Intranet and Trusted zones. Using the Site to Zone GPO ...
1
vote
2answers
606 views

What does “Assigned” mean in the Azure AD Application user list?

Within the Azure portal, inside an Active Tenant I have an application with users listed, of which are created in the tenant. What does the term Assigned mean? I incorrectly assumed that it meant ...
2
votes
2answers
241 views

IBM WebSphere Application Server SSO does not set REMOTE_USER on Cognos BI 10.2.2

Very similar issue was posted here, I do not believe they are the same. IBM WebSphere Application Server SSO sets REMOTE_USER incorrectly We are running IBM Cognos Business Intelligence Server ...